Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
File:                     C6yCgEcArTZTi_hvNMBz6XFDDaU.mft (raw, json)
Hash identifier:          YSincH210ht4Vdd4aebtUjfbv1M7P3Aoe5rj/B7JnJU=
Subject key identifier:   73:45:FC:31:1C:9D:EF:EE:63:88:1D:15:1A:27:D4:78:AE:64:85:10
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Certificate issuer:       /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial:       01962F74C9FD3EBC757DB23DF138883B2532
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 14:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:45 +0000
Files and hashes:         1: 1Rd2o3xUjPYq6-ROGbojsnIAO7o.roa (hash: cJibfgam1opzds5Qh9r7Y5ffttnidwSOVT40ptzFnqs=)
                          2: 3BgoLFWZ9YgbC6oPkKTi3o_J_gQ.roa (hash: S8E8XfDmes95rq1PbjLgkDvVZJpWeDUS/8l576aU10U=)
                          3: 7bJ_SXsvQs5jd90zxR_xlvABeGo.roa (hash: m0ZQ2Y2DbXV8jV6KvTNs6fUZ/bk3yiFcpgd8GYS9O7Q=)
                          4: C6yCgEcArTZTi_hvNMBz6XFDDaU.crl (hash: 8NtpFAxNNhSPXWRy0lpN/Tttc0s7nTUEppmM4s4Qle0=)
                          5: EJIUsUOKvSLerwNQFS-Out5zZuM.roa (hash: D433E6UiMyX9KdcjAcomX19JFn+CfTOeAqT8DsBwSkY=)
                          6: GshRjDb-Zbu23RojTPd3mMvH0TM.roa (hash: EGZWJCBjjnCz3hB33ujglwfZC/yWBu1E05nBP8l/bQM=)
                          7: IYymNdWawqstgCP4XTcQ0LRxyO4.roa (hash: zZeH4Zhf/0r9N1702in9DCWq7U55L0ULISwTrHj2H68=)
                          8: L1Bz6qAa7Tw2r0koEROI1LNkc8U.roa (hash: DocEMWhWVMmnhBegXTSWZpGGhsBAl4jcHIRujEDNT44=)
                          9: WFuvk7y8ijWBMVOxcabYl2Ki2Zk.roa (hash: Y1vQADdFnTt26buVHpJs8/b1wmIjOC6mALpusa/UOmM=)
                          10: b_Dm6TuKr2O9F9em_a6cktDchPg.roa (hash: ehArjKJWDMxsQnB7k5Ijrml5MK5YWi9DCvAWzUWkArc=)
                          11: vdMwrE1WRBo6tPAM0c8ANEH4m7w.roa (hash: aAOimEwL2ZyXBynFWKnhjaaS/YCd7rqkh4wnbJ4qboQ=)
                          12: xkRsFChgw8FgF1z4ealSBYfjSiw.roa (hash: c2XTA6ndUBR9DMhPW66OSPqlDjn7RwF/yQC+0Ynbm/Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c9:fd:3e:bc:75:7d:b2:3d:f1:38:88:3b:25:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
        Validity
            Not Before: Apr 13 14:01:45 2025 GMT
            Not After : Apr 14 14:01:45 2025 GMT
        Subject: CN=7345fc311c9defee63881d151a27d478ae648510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:a4:d8:d3:8d:1c:0d:37:09:1d:76:c0:85:
                    88:53:5b:a6:45:a2:1f:6d:bb:44:9b:7c:41:7b:c0:
                    36:b1:58:5f:36:b3:0b:9b:bb:95:9f:44:42:a6:47:
                    2f:b1:f1:b8:22:cd:bf:91:97:35:df:9b:18:99:ba:
                    94:6c:d8:f6:42:eb:f8:f4:0f:27:57:04:90:e9:5f:
                    14:66:ea:ac:d0:f3:1b:6f:e0:e5:25:45:64:5a:98:
                    df:4c:92:bd:1f:0d:c3:4d:d7:a4:b9:a1:92:ef:4e:
                    76:29:cc:a2:7a:88:be:25:c5:b0:3f:3e:28:20:32:
                    10:0d:b1:a3:e7:fb:90:25:4b:fe:f9:e0:02:f4:de:
                    06:81:15:e7:a3:a0:47:09:55:ad:45:36:8e:7d:84:
                    5a:3c:8c:23:d7:9c:dc:86:38:33:19:57:9a:8b:6d:
                    ec:d4:e7:7e:9a:cb:03:fe:8c:e6:45:11:0b:a4:a2:
                    ca:60:78:e4:4c:08:44:6c:c0:fd:30:08:98:4c:d5:
                    d4:9e:1e:c2:96:d5:f9:4d:8f:62:21:da:30:aa:7d:
                    d7:b1:10:43:f2:0b:1a:c1:2e:60:53:35:33:40:28:
                    38:04:d1:3d:04:72:f3:42:f9:de:d4:96:5a:1a:4f:
                    25:66:c8:fa:0d:3c:00:78:91:cd:4c:a2:3d:bf:c2:
                    65:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:45:FC:31:1C:9D:EF:EE:63:88:1D:15:1A:27:D4:78:AE:64:85:10
            X509v3 Authority Key Identifier:
                keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:76:96:fc:3e:3b:1e:b5:39:5b:56:a0:9a:0a:1b:9c:3e:37:
         78:ee:59:4e:d3:41:e8:39:4d:7f:3b:94:a7:08:65:83:0d:c9:
         b3:62:18:d4:9c:0f:de:4c:05:41:cc:6f:c5:ac:2f:e0:ba:51:
         43:09:2e:72:5e:6d:2d:b1:13:9e:f3:34:77:9f:4b:fd:78:86:
         02:be:97:71:e3:9f:fa:f2:04:f3:68:31:34:8c:80:2f:e9:86:
         1c:68:a7:54:1c:cf:63:ca:7f:c3:83:fd:43:e6:12:e9:56:a7:
         50:d6:78:7d:5e:bd:62:ea:12:c5:31:b7:3e:57:62:47:49:f7:
         23:29:ac:7b:e5:40:44:90:dd:e5:85:b4:f1:8d:b8:29:b1:ad:
         7d:fb:93:5d:81:a0:80:95:24:e7:ca:82:a9:f4:c9:8b:69:8f:
         d7:2c:0e:ad:0b:ba:ee:a7:1b:9b:fb:97:77:f9:45:ff:81:d1:
         fd:08:85:1e:46:c5:ff:aa:74:f8:53:fe:f7:bf:28:17:49:17:
         8b:4a:1b:0d:44:b5:8b:7e:ba:56:14:db:92:70:5b:8f:c9:e2:
         a0:91:99:7d:dc:7d:8f:df:47:43:8b:29:c5:94:43:d5:0a:79:
         22:21:53:79:3e:c8:60:c4:9a:ce:94:72:b8:f5:c9:df:94:84:
         a9:f1:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----